Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dd893ed-4ced-3a18-87e3-0bfb2b922043.roa
File:                     1dd893ed-4ced-3a18-87e3-0bfb2b922043.roa (raw, json)
Hash identifier:          3A8ERSbCuqtKe9UCT6h60zQFKhzilq0Z7m5w5Nl1sSc=
Subject key identifier:   8A:A4:8E:C8:00:83:0F:9B:B3:35:C4:03:09:40:85:9B:F4:0C:AB:A6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493169DB159623DCEC378D060
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dd893ed-4ced-3a18-87e3-0bfb2b922043.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:9d:b1:59:62:3d:ce:c3:78:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=e15fc336-c6c9-4093-b115-a12437781ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:a3:c0:18:eb:30:fe:fb:37:53:91:32:dc:
                    5a:99:32:fb:46:87:37:3f:c5:be:26:ee:df:45:6b:
                    51:4e:2b:f1:e7:aa:58:50:24:5a:ad:71:b1:3f:58:
                    74:c8:10:12:63:2d:a4:b9:61:9b:ea:2e:3f:d3:48:
                    0d:73:8f:62:5d:ce:e7:38:92:a9:fc:75:53:15:76:
                    01:5b:33:5d:fa:5f:57:ce:17:8e:df:f5:ae:37:29:
                    6e:b8:4e:0d:31:1a:7d:7f:98:87:15:87:4c:6d:00:
                    1e:96:19:78:9b:31:17:7a:5b:07:98:0e:53:d7:41:
                    bb:c8:e0:1e:20:4c:0e:58:02:11:ee:05:4d:5f:92:
                    5d:7f:12:d6:83:ef:ec:66:f0:e1:c1:71:b4:d9:f2:
                    64:08:3a:90:0a:85:61:14:e5:72:30:10:2a:a7:5d:
                    ce:ff:f9:6c:cd:c3:db:60:7a:f5:a0:e9:fe:74:d0:
                    70:b5:ae:36:5a:3d:76:73:e4:03:32:2f:76:1e:37:
                    e6:a4:11:43:29:89:cd:be:0a:c5:2b:f5:1c:09:7f:
                    bb:bc:71:90:7c:66:e9:eb:49:6d:9b:7e:c4:4b:ff:
                    db:b6:70:d3:4e:25:71:56:f2:16:b3:5a:ee:f0:6b:
                    93:08:c9:24:76:2d:54:6e:58:69:c2:5b:a5:48:78:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A4:8E:C8:00:83:0F:9B:B3:35:C4:03:09:40:85:9B:F4:0C:AB:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dd893ed-4ced-3a18-87e3-0bfb2b922043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:76:40:4a:af:6e:5c:cc:1d:cf:c6:a2:bb:4c:8f:8e:f1:
         98:f9:15:99:d7:3f:a5:17:75:5f:1b:0a:6a:f0:a2:18:0f:60:
         cf:d4:0c:7a:c2:36:97:69:4a:0f:e6:81:58:1d:35:d2:5f:ba:
         57:e1:e1:c2:89:20:ed:74:18:0b:43:4b:0d:72:29:e3:cf:18:
         1b:e9:50:8f:b8:6a:f9:dd:62:63:11:43:30:95:33:ac:77:87:
         2b:87:43:52:0a:79:ab:79:da:e7:35:7a:63:13:bb:0c:ea:12:
         b2:7c:9a:50:2a:03:f8:fe:fb:16:8b:af:74:b5:dd:bf:af:52:
         4d:a4:c1:fe:e3:ce:f8:ea:a4:05:7e:19:74:43:06:7d:5e:52:
         d9:f8:a4:fc:88:a0:54:ff:53:2d:f0:67:b8:9a:61:f2:c6:3a:
         1c:a3:77:fa:2e:43:27:f6:94:c9:5d:e3:75:3b:ae:7b:c4:6e:
         50:93:a9:29:58:66:9e:fb:c8:58:99:90:35:22:07:33:43:35:
         6f:13:60:4e:a9:f7:d6:64:8b:53:b8:d3:97:29:ac:04:96:ba:
         f9:9c:f9:de:f3:e9:46:20:e0:de:f5:53:96:e6:9e:f6:53:76:
         23:84:7d:0f:6d:19:6f:be:3b:86:b6:20:6f:4f:12:4f:d8:50:
         79:c9:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----